Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/6bBGc2KjC72Elt_3014E5z9r2K0.roa
File: 6bBGc2KjC72Elt_3014E5z9r2K0.roa (raw, json)
Hash identifier: /C/JmZJgKUNjt8zv9Dhxvt9cKz1TGxrw4XPz6dly2DA=
Subject key identifier: E9:B0:46:73:62:A3:0B:BD:84:96:DF:F7:D3:5E:04:E7:3F:6B:D8:AD
Certificate issuer: /CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
Certificate serial: 018CC2DAD35DD3460093A6FC260FEE7A442B
Authority key identifier: 6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/6bBGc2KjC72Elt_3014E5z9r2K0.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201533
IP address blocks: 185.71.232.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d3:5d:d3:46:00:93:a6:fc:26:0f:ee:7a:44:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9b0467362a30bbd8496dff7d35e04e73f6bd8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:b1:a9:05:f0:d9:70:4d:cc:eb:90:63:42:
4c:38:f9:09:20:e6:da:04:e5:31:4e:94:57:8a:1f:
31:4e:34:58:29:d8:24:c3:34:3a:79:41:e7:a2:79:
a7:33:41:51:d3:7a:a8:c6:e2:6c:dc:e4:57:b2:af:
18:80:c5:4f:7f:f8:cc:69:f4:69:e3:34:30:08:3c:
d3:09:d5:f8:84:48:12:5d:c8:6f:87:15:1c:71:8a:
0f:16:3e:8e:fa:87:59:4d:7a:03:37:bb:10:af:b5:
c2:d1:33:31:53:9d:ed:4b:ea:96:6c:0c:30:3a:89:
1f:81:05:be:23:17:52:0e:bf:8f:d4:42:4a:a5:c2:
39:d8:bf:14:f7:99:7e:ca:18:36:31:cc:17:14:6a:
99:b0:9f:5c:bf:43:df:17:dc:c9:38:14:78:2c:f7:
43:50:b6:09:03:57:8d:63:69:99:80:d9:05:a9:cd:
b5:da:de:22:3b:f5:e4:48:04:e9:d9:3f:93:8b:62:
6b:cc:a9:68:16:bf:a2:9b:52:3e:a5:aa:99:bd:c4:
17:00:f0:f1:0c:db:f7:d3:b7:ba:68:cc:ad:4e:b2:
78:6f:c0:2b:22:8e:89:a7:08:33:4b:be:92:78:8c:
f1:0e:5e:66:d8:c8:41:d0:69:e1:0b:d2:fc:80:d7:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B0:46:73:62:A3:0B:BD:84:96:DF:F7:D3:5E:04:E7:3F:6B:D8:AD
X509v3 Authority Key Identifier:
keyid:6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/6bBGc2KjC72Elt_3014E5z9r2K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:4c:3e:68:c9:49:8e:80:01:5e:da:22:66:94:59:59:87:09:
ae:30:2d:9f:0a:a6:ab:e8:3b:a1:02:af:c9:74:30:7f:c1:c4:
39:de:7e:77:63:a6:11:90:5a:c4:ae:dc:95:1c:e5:9c:f6:3a:
59:fb:55:67:c2:cd:70:d8:71:60:3a:1c:e4:28:4d:75:aa:56:
79:32:c6:5a:91:05:c4:23:3f:cc:e5:0c:38:04:a5:91:e3:70:
7a:74:a7:e4:02:69:39:2b:69:00:da:c9:23:a8:77:73:d0:43:
b1:7f:b1:0e:06:5b:56:9d:a5:19:a2:02:63:06:7a:9e:10:89:
5a:d5:6a:c8:db:0d:39:35:3c:b5:56:da:9c:73:ee:50:7b:ef:
14:01:70:84:37:e4:39:b2:12:24:69:86:1f:c4:c6:ed:4a:44:
25:91:5b:d5:a4:2c:59:76:f4:0e:c9:76:fa:02:ec:42:63:d2:
13:46:1b:7a:a6:f2:17:57:d2:56:f1:88:a9:07:9a:00:fa:32:
94:42:d0:8e:24:b1:f2:11:9c:f2:e9:22:9d:1a:23:bd:4c:a5:
9d:58:98:86:ab:88:b7:13:8c:0c:77:57:f6:5d:01:8c:0d:a2:
25:85:69:90:c4:2f:04:6f:c9:94:4b:cc:d5:0f:32:ca:b8:5c:
73:54:b1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:53 2024 by rpki-client on console-ams.rpki-client.org